Home / malware

PDF

Virus:W97M/Thus.G

First posted on 15 February 2019.
Source: Microsoft

Aliases :

Virus:W97M/Thus.G is also known as W97M.Defender.A, W97M/Thus.BM, W97M/Thus.gen, WM97/Thus-T, W97M.Thus.Family, W97M_Generic, Virus.MSWord.Thus.aa.

Explanation :

Virus:W97M/Thus.G is a Microsoft Word VBA Class module virus that infects Word documents and templates. This virus does not perform a payload other than to infect other files.  InstallationThe virus infects the Normal Template and any opened documents by deleting other macros and inserting itself. Files are then infected when documents are opened, closed or new documents are created.  PayloadThis macro virus, if allowed to run, disables macro security.  Additional InformationInfected documents contain the following string 'Anti-Virus' in the VBA code, which also serves as the infection marker for the virus. Early variants of the virus used a marker comment string 'Thus_001', a derivative of the virus family name.

Last update 15 February 2019

 

TOP